Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier: bbStyO2TX1v4lfKDS3runR1WdmpRMjHVPRDpZWpKUAA=
Subject key identifier: 8F:25:4E:F1:93:25:8C:14:27:F5:21:CF:4E:B9:09:0C:24:29:71:0E
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 019A31208A8668E19F6CDB5840F45318FF9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number: 1701
Signing time: Wed 29 Oct 2025 18:00:07 +0000
Manifest this update: Wed 29 Oct 2025 18:00:07 +0000
Manifest next update: Thu 30 Oct 2025 18:00:07 +0000
Files and hashes: 1: Fu58RJgsZ5Us0AAevq0rVOWRRzg.roa (hash: ng5uPev1pyRZi4kTfCBU+j8vTTj6PtE4Pb5wITUaj0Y=)
2: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: dHFwUZTnF5xEdlsz7qc6aq2vjJJP89rtQnv+QPQCS3Q=)
3: qthrebr-v1IWeqSrT9AeYqstaDk.roa (hash: DPL9WcMNI+TsTDagJsEchXMuxd7Nz1dhpWlTxjl+984=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:20:8a:86:68:e1:9f:6c:db:58:40:f4:53:18:ff:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Oct 29 18:00:07 2025 GMT
Not After : Oct 30 18:00:07 2025 GMT
Subject: CN=8f254ef193258c1427f521cf4eb9090c2429710e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:77:58:30:e8:0b:71:d4:a8:99:0a:d1:4a:
77:da:cf:32:ee:6f:1c:be:0b:33:b5:26:10:77:47:
dd:06:07:01:76:e6:b0:4f:1e:08:14:d4:28:58:df:
f6:2b:71:c2:85:14:ae:89:d2:3d:42:71:e5:15:45:
11:02:6d:c0:74:96:f6:f3:f3:29:97:93:f3:95:39:
e5:9b:3a:a3:dc:75:27:b4:10:eb:a6:2d:0f:d3:24:
2e:bb:a7:88:7b:79:5e:c2:58:e9:cd:62:3f:a3:3d:
55:76:62:15:df:66:96:9f:08:9e:d6:ce:b8:7a:6d:
b0:6a:34:ab:aa:d4:3f:98:c1:0c:c8:26:8e:7c:3f:
f8:cf:2b:3b:59:2e:97:45:97:ff:07:8e:78:c1:eb:
73:22:8f:e3:68:80:5a:ae:66:ce:13:34:46:e0:ee:
71:86:f5:14:ff:13:87:59:6c:0d:52:30:31:b9:c4:
df:f0:bb:8f:c4:c9:ac:b5:a9:d6:b0:5e:94:e0:26:
f9:06:62:eb:20:e5:17:d5:a4:41:65:aa:25:06:cf:
5b:ff:65:e8:51:2d:8c:9d:18:90:3b:b9:b3:9e:5b:
c5:4e:7e:06:20:39:92:17:ee:80:1f:a1:ba:5b:ee:
47:48:1d:fd:fc:e5:71:2f:f5:5c:8f:84:04:82:89:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:25:4E:F1:93:25:8C:14:27:F5:21:CF:4E:B9:09:0C:24:29:71:0E
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:96:59:32:29:fc:58:e3:c6:fe:fd:57:94:11:dc:18:ee:92:
a5:4d:38:3b:ca:10:f3:d1:fa:9d:3c:ef:8e:ac:96:ef:83:89:
d0:8e:60:5f:04:a4:78:63:5d:38:fb:7f:b1:3b:f7:d5:90:11:
6f:97:a0:70:8f:fc:80:5c:be:45:4b:c6:cf:2d:e9:28:79:c7:
0a:e2:a7:3f:01:64:41:24:c6:ee:a0:c6:1e:d3:10:a8:a6:96:
16:85:cc:a1:58:35:83:ba:9a:0f:85:eb:23:59:e1:c9:4c:1b:
c1:16:53:69:9d:e8:c9:a1:ef:9b:88:0f:93:6f:88:af:0f:3d:
df:af:9d:b0:b9:24:2f:9c:79:d9:6e:04:ca:e8:26:1f:6e:ba:
a8:69:77:19:10:4b:df:33:33:91:0d:c6:f4:e7:c9:43:65:bc:
89:01:62:c9:c3:18:4a:ed:30:cf:26:d9:39:8a:31:a2:20:72:
ed:11:ed:08:6c:06:97:ee:dd:7b:ea:b6:c4:98:e0:53:d4:bc:
61:ce:7b:c7:70:fd:a6:8a:99:16:7b:40:7c:56:68:3e:9c:58:
14:e1:60:ea:d5:9a:32:13:03:25:65:64:95:09:f9:44:55:2b:
d2:fd:e8:1e:a0:a2:10:5d:fd:29:2d:00:4f:e2:aa:69:bf:7b:
1a:38:34:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 20:27:47 2025 by rpki-client